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Abstract 

We study a simple graph-based classical secret sharing scheme: ev- 
ery player's share consists of a random key together with the encryp- 
tion of the secret with the keys of his neighbours. A characterisation 
of the authorised and forbidden sets of players is given. Moreover, we 
show that this protocol is equivalent to the graph state quantum secret 
sharing (GS-QSS) schemes [7], El [5] when the secret is classical. When 
the secret is an arbitrary quantum state, a set of players is authorised 
for a GS-QSS scheme if and only if, for the corresponding simple clas- 
sical graph-based protocol, the set is authorised and its complement 
set is not. 



1 Introduction 



Quantum secret sharing protocols [21 [3] are quantum extensions of the clas- 
sical secret sharing protocols [H [8] . They consists in encoding a secret into 
a multipartite quantum state. Each of the players of the protocol has a sub- 
part of this quantum system, called a share. Authorised sets of players are 
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those that can recover collectively the secret. The encrypted secret can be a 
quantum state or a classical message. 

In the literature, several quantum secret schemes have been introduced 
[7]. In particular Markham and Sander have introduced QSS schemes based 
on graph states: the secret is encoded into a graph state, i.e. a quantum 
state which is characterised by a graph. Every vertex of the graph represent 
a player. Both classical and quantum secrets are considered in the graph state 
quantum secret sharing schemes. In [7], connections between the authorised 
sets for a classical secret and the authorised sets for a quantum secret have 
been established. Recently, in [5], a graphical characterisation of authorised 
and forbidden sets of players have been introduced in both cases of a classical 
and a quantum secret. 

In this note, we study a family of graph-based secret sharing protocols. 
Given a simple undirected graph and a given secret, every player's share is 
a pair which consists of a random key together with the encryption of the 
secret by modular addition with the keys of the neighbour players in the 
graph (see the section [3]). In section HJ we show that the access structure 
of the classical graph-based protocol coincides with the access structure of 
the GS-QSS when the secret is classical. As a consequence, whenever the 
secret is classical, any GS-QSS can be simulated by a simple classical scheme. 
Moreover, we point out the connections between the GS-QSS with quantum 
secret and the classical graph based protocols: the authorised sets of players 
are those which are authorised for the classical protocol for the same graph 
and its complement. 

2 Notations 

For a given classical or quantum secret sharing protocol over n players, a 
subset of players is authorised if the players of the subset can recover collec- 
tively the secret. A subset of players is forbidden if they have no information 
about the secret. Notice that a third kind of sets of players may exist, those 
who have some partial information about the secret. The description of the 
authorised and forbidden sets is called the accessing structure of the protocol. 

In this paper, the protocols are characterised by simple undirected^ graphs. 

= {V,E) is a simple undirected graph if Vu £ V, {u,u) ^ E and {u,v) E E ^ 
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For a given graph G = {V, E) and for any vertex u & V, Af{u) := {f G 
V I {u, v) G E} denotes the neighbourhood of m in G ; for any D ^ V, 
Odd{D) := {v E V \ \J\f{v) nD\ = 1 mod 2} is called the odd-neighbourhood 
of D in G. Notice that Odd{D) = AueD-f^iu), where A is the symmet- 
ric difference {AAB = {A U B) \ {A (1 B)). For a given subset B C V, 
let i? = \ i? be its complement. For a given graph G = {V,E), let 
G = (y, E \ {{u, u) I -u G V}) be its complement graph. 

3 A graph-based classical protocol 

In this section, we consider a family of classical secret sharing protocols, each 
of these protocols is parameterised by a graph. For a given simple undirected 
graph G = (V, E), each vertex i E V represents a player. The secret to share 
is a bit s G {0, 1}. Each player receives the secret one-time padded by the 
keys of his neighbours. Formally, the classical graph-based secret sharing 
(GSS) protocol is defined as follows: 

Sharing the secret. 

• For each player i, pick a bit fcj uniformly at random in {0,1}. 

• For each i, compute the value Cj = s + J2i'eJ\fii) 2. 

• Give player i the couple {ki,Ci). 

An example of GSS protocol is given in Figure [H 

Recovering the secret. Since every player has the secret encrypted us- 
ing the keys of his neighbours, it comes that each player together with his 
neighbours can recover the secret. So, in the example given in Figured! any 
superset of the following sets of players is authorised: {1,2}, {2, 3, 4}, {4, 5}. 
But not all the authorised sets are of that kind: if the players 1, 3 and 5 add 
up their encrypted secret, the resulting bit is C1 + C3 + C5 = 3s + 2/c2 + 2^4 = s 
mod 2, so the set {1,3,5} is also an authorised set. More generally, we 

{v,u) e E 
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{k2,s + ki + ks) 



(/C4,S + fc3 + fc5) 



(0,0) 



(1,0) 



(1,1) 




Figure 1: Top: The GSS scheme when the graph is a P5. The sums are 
modulo 2. Bottom: The same protocol for s = 1 and some particular values 
of fc's. 



consider the following sets of players and we show that they are authorised 
sets. 

Definition 1. Given a graph G — {V,E), a set B CV is c-accessing if and 
only if: 



3D C B, 



D U Odd{D) C B 
\D\ = 1 mod 2 



(1) 



For a given graph G = {V, E),\ct B CV be a c- accessing set and let D C 
B such that \D\ = 1 mod 2 and Odd{D) C B. In the following, wc show that 
the players in B can recover the secret by computing ^jg£, Cj + '^j^odd{D) ^3 
mod 2. 



E^'+ E % = Eh+ E E 

ieD jeOdd{D) ieD y i'eJ\r(,i) J jeOdd{D) 

= \D\.s+ ki>+ Y % 

ieD,i'eM(i) jeOdd{D) 

j'ev jeOdd{D) 
— s mod 2 
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As a consequence: 

Property 1. Given a graph G = {V,E), any set B of players which is 
c-accessing is an authorised set. 

In the rest of the section, we show that any set which is not c-accessing is 
forbidden. As a consequence, the c-accessible sets provide a characterisation 
of the authorised sets. It also proves that for any graph, the protocol is 
perfect, i.e. any set of players is either authorised or forbidden. 

The proof is using the following characterisation of the sets which are not 
c-accessing, proved in [5], stating that a set is not c-accessing if and only if 
it is oddly-dominated by a subset of its complement: 

Lemma 1 ([5J). Given a graph G = {V, E) , B ^ V is not c-acessing if and 
only if 

3G C B, Odd{C) D B (2) 

Theorem 1. Given a graph G = {V, E), any set B (1 V of players which is 
not c-accessible is forbidden. 

Proof. Let S be a set of players which is not c-accessible. The players in 
B share collectively the following bits: {{ki,Ci)).^^. Let = {ki)i(zB and 
Cb = {ci)ieB- We want to show that the players in B have no information 
about the secret, i.e. P{s\kB,CB) = P{s\kB, cb). 

Notice that P{s\kB, cb) = P{s\kB,CB) since Vz, q = •s + X]jgA^(i) ki. More- 
over, P{s\kB,CB) = ^(ca^i'^)'' • According to Lemma [H there exists G C B 
s.t. Odd{G) 3 B, i.e. v/e S, \^^{i) n C| = 1 mod 2. For any i e B, 

Ci = 1 + s + ki mod 2 

= l + s+ ^ ki+ ^ ki mod 2 

jeAA(j)nc jeAf{i)nc 

= 1 + S + |Ar(i) nc| + J2 

jeAf{i)nc jeM{i)nc 

= s + ki + ki mod 2 

j&Af{i)nc jeM{i)r\C 
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As a consequence, P{cB\kB,kc) = P{cB\kB, kc) and P{s,CB\kB,kc) = 
P{s,CB\kB,kc). Hence, 



P{s\kB,CB) = P{s\kB,CB) 

_ P{s,c^\kB) 
Pic^\kB) 

Efccg{o,i}c P{kc)P{s, c^\kB, kc) 
Efcce{o,i}c- P{kc)P(cB\kB, kc) 

T.kce{o,i}o m^i^^ ^B\kB, kc) 
J2kce{o,i}c w^P{cB\kB, kc) 

EfccgjO.ljC ^P{s,CB\kB,kc) 
EfccG{o,i}c ^P{cB\kB, kc) 

_ P{s,CB\kB) 

P{cB\kB) 
= P{s\kB,CB) 

□ 

Property [1] and Theorem [1] provide a characterisation of accessible sets. 
Moreover, any set which is not c-accessible cannot learn any information 
about the secret. 

4 Graph state quantum secret sharing 

Secret sharing with graph states (GS-QSS) has been introduced by Markham 
and Sanders in [7]. For a given graph of order n, the secret - which can be 
either classical or quantum - is encoded into the n-partite quantum state 
described by the graph, the so called graph state Then each of the n 
players receives one qubit of the quantum state. 

It has been shown in [5J that, when the secret is a classical bit, every 
subset of players is either authorised or forbidden, and that the authorised 
sets are the c-accessing sets in the corresponding graph i.e., the subsets B 
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of players such that 3D C B, \D\ = 1 mod 2 and Odd{D) C 5. As a 
consequence, 

Property 2. Given a graph G, when the secret is a classical bit, the access- 
ing structure of the GS-QSS scheme characterised by G coincides with the 
accessing structure of the GSS characterised by G. 

Thus, when the secret is classical, any GS-QSS protocol can be simulated 
by a GSS protocol, which is simple classical protocol that consists in sending 
each player only two bits. It shows, when the secret is classical, there is no 
benefit to use a graph state quantum protocol rather than a fully classical 
protocol. 

When the secret is an arbitrary quantum state, an interesting reduction to 
the classical secret case has been shown in [7] : given a graph G, a set of players 
is authorised for a quantum secret in the GS-QSS protocol characterised by 
G if and only if this set of players is authorised in both (i) the GS-QSS 
protocol characterised by G when the secret is classical, and (ii) the GS-QSS 
protocol characterised by G when the secret is classical. As a consequence: 

Property 3. When the secret is an arbitrary quantum state, the authorised 
sets of players in a GS-QSS scheme for a graph G are those which are au- 
thorised in the two particular instances G and G of the GSS protocol. 

In [5], it has been proven that a set B of players is c-accessible in both 
G and G if and only if B is c-accessible in G and B is not c-accessible in 
G. As a consequence, the accessing structure of a GSS protocol provides 
a full characterisation of the authorised sets in the corresponding GS-QSS 
protocol: 

Property 4. When the secret is an arbitrary quantum state, a set B of 
players is authorised in a GS-QSS scheme for a graph G if and only if B is 
authorised and B is forbidden in the GSS scheme for G. 

5 Conclusion 

In this note, we characterise the accessing structure of a simple graph-based 
secret sharing (GSS) protocol. Moreover, we show that this simple protocol 
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is strongly related to the study of the graph-state quantum secret sharing 
(GS-QSS) protocols. We point out that, when the secret is classical, any GS- 
QSS scheme can be simulated by a GSS protocol. Moreover, when the secret 
is an arbitrary quantum state, the accessing structure of a GSS provides a 
full characterisation of the authorised sets in the corresponding GS-QSS: an 
authorised set in the quantum case is a set which is authorised in the classical 
case and such that its complement set is forbidden in the classical case. 
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